!LemuOOvbWqRXodtSsw:nixos.org

NixOS Reproducible Builds

543 Members
Report: https://reproducible.nixos.org Project progress: https://github.com/orgs/NixOS/projects/30122 Servers

Load older messages


SenderMessageTime
26 May 2021
@andi:kack.itandi-Simply not having any stdenv was so much fast :D10:38:31
@andi:kack.itandi-
In reply to @gytis-ivaskevicius:matrix.org
How much value are we talking about?
I think a guix style benefit would be nice but probably not realistic as they also execute guile within the build.
10:39:16
@zimbatm:numtide.comJonas Chevalierthat's another benefit of experimenting with scratchix10:39:58
@zimbatm:numtide.comJonas Chevalierit allows to play with ideas like that10:40:06
@gytis-ivaskevicius:matrix.orgGytis Ivaskevicius
In reply to @andi:kack.it
I think a guix style benefit would be nice but probably not realistic as they also execute guile within the build.
if i recall correctly they use the lispy shell which is basically unusable shell and more like proper lispy programming language
10:40:33
@andi:kack.itandi-Yeah, that is fine for build scripts10:41:03
@toonn:matrix.orgtoonn Being able to reuse Guix work would be pretty cool though. 10:41:14
@andi:kack.itandi-Probably not practical as they have a nice integration from eval -> derivation where they can pass lipsy code, no?10:42:04
@andi:kack.itandi-Instead we are stuck with our custom Nix interpreter that can't even be used outside of a store environment..10:42:29
@zimbatm:numtide.comJonas ChevalierWhen you write a nix template and then find out that some parameters need to be filled in at runtime10:43:12
@zimbatm:numtide.comJonas ChevalierHow many times I had to tack on some sed to fill the runtime info. Or some mix between bash at runtime and nix as eval time.10:44:14
@andi:kack.itandi-In a way the language that you use to describe the build environment must also drive it.10:45:28
@andi:kack.itandi-Or you always end up with the split we are having right now.10:45:38
@zimbatm:numtide.comJonas ChevalierIt reminds me of terraform that has two languages into one10:46:45
@toonn:matrix.orgtoonn Though you kinda always have to bridge to shell eventually. Because that's what most build tools expect. 10:46:57
@andi:kack.itandi-Yes but usually you call a bash script and only care about the result. You never (or rarely?) consume the environment it created. You can just call another shell script from your clean shell env. Problem arises when you have to use the output of a previous phase.10:49:03
@andi:kack.itandi-

Gytis Ivaskevicius: btw: the gccgo9 build did finish with this line:

cycle detected in the references of '/nix/store/37msxfm5cil2m4cvn06yb7miv68j9pk5-gccgo9-9.3.0-lib' from '/nix/store/xdyzifmvys1gna6fcbmvc6wahd5cy0vn-gccgo9-9.3.0'

10:50:15
@andi:kack.itandi-but otherwise looked good :D10:50:21
@gytis-ivaskevicius:matrix.orgGytis Ivaskevicius:D10:51:12
@gytis-ivaskevicius:matrix.orgGytis Ivaskeviciusnice10:51:13
@andi:kack.itandi-So if you want to redo the Go bootstrap ping me for a review. I'd be very happy about it.10:52:16
@gytis-ivaskevicius:matrix.orgGytis IvaskeviciusIll think about it. Currently i got quite a bit on my hands10:53:36
@andi:kack.itandi-Another exercise related to bootstrapping that I would love to do: build a bootstrap tarball on x86_64-linux with nixpkgs, then substitute our bootstrap tarball with the equivalent files from a debian/fedora/... and rebuild that bootstrap tarball. Ideally the results should be identialca.10:54:06
@andi:kack.itandi- * Another exercise related to bootstrapping that I would love to do: build a bootstrap tarball on x86_64-linux with nixpkgs, then substitute our bootstrap tarball with the equivalent files from a debian/fedora/... and rebuild that bootstrap tarball. Ideally the results should be identialcal10:54:09
@gytis-ivaskevicius:matrix.orgGytis IvaskeviciusOh, actually thats pretty smart10:54:44
@andi:kack.itandi-If they are not we can see why and rule out those impurities. Once we can show that you can bootstrap nixpkgs from another distros sources (e.g. Guix MES bootstrapped toolchain) we have a bit more "trust" into those files.10:55:46
@linus.heckemann:matrix.mayflower.deLinux Hackermanthat's basically https://www.schneier.com/blog/archives/2006/01/countering_trus.html right?10:57:35
@andi:kack.itandi-perhaps a gentoo stage1 tarball would be a good starting point as those already exist10:57:39
@gytis-ivaskevicius:matrix.orgGytis Ivaskeviciuswell, currently its not going to be reproducible for sure11:00:07
@andi:kack.itandi-Well because our GCC isn't but otherwise?11:01:34

Show newer messages


Back to Room ListRoom Version: 6